#716 - python-x2gobroker web/plain module strips passwords breaking passwords that start or end with a space

X2Go Bug report logs - #716
python-x2gobroker web/plain module strips passwords breaking passwords that start or end with a space

Reported by: Jason Alavaliant <alavaliant@ra09.com>

Date: Mon, 5 Jan 2015 05:10:02 UTC

Severity: normal

Tags: patch, pending

Found in version 0.0.2.3

Fixed in version 0.0.3.0

Done: X2Go Release Manager <git-admin@x2go.org>

Bug is archived. No further changes may be made.

Received: (at submit) by bugs.x2go.org; 5 Jan 2015 05:08:24 +0000
From alavaliant@ra09.com  Mon Jan  5 06:08:21 2015
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on
	ymir.das-netzwerkteam.de
X-Spam-Level: 
X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,URIBL_BLOCKED
	autolearn=ham version=3.3.2
Received: from thetower.ra09.com (ra09.com [202.124.104.240])
	by ymir.das-netzwerkteam.de (Postfix) with ESMTPS id 5DFF65DB48
	for <submit@bugs.x2go.org>; Mon,  5 Jan 2015 06:08:21 +0100 (CET)
Received: from localhost ([127.0.0.1] helo=private.ra09.com)
	by thetower.ra09.com with esmtp (Exim 4.80)
	(envelope-from <alavaliant@ra09.com>)
	id 1Y7zto-00045O-LA
	for submit@bugs.x2go.org; Mon, 05 Jan 2015 18:08:17 +1300
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="=_2eac67d1ac0e696a2eb101dac646ac37"
Date: Mon, 05 Jan 2015 18:08:16 +1300
From: Jason Alavaliant <alavaliant@ra09.com>
To: submit@bugs.x2go.org
Subject: python-x2gobroker web/plain module strips passwords breaking
 passwords that start or end with a space
Message-ID: <fc2873b0fe79914476c3f466ed9b05ff@private.ra09.com>
X-Sender: alavaliant@ra09.com
User-Agent: Roundcube Webmail/1.0.4

[Message part 1 (text/plain, inline)]

Package: python-x2gobroker Version: 0.0.2.3 Tags: patch One of my users was getting their authentication failing when connecting to an x2go broker using the http plain backend. Testing revealed that their password ended with a space which the web/plain module default code was automatically stripping off before passing through to the authservice. The attached patch disables stripping for the password argument so passwords starting/ending with spaces are no longer incorrectly rejected. Thanks Jason

X2Go Developers <owner@bugs.x2go.org>. Last modified: Thu Nov 21 20:41:49 2024; Machine Name: ymir.das-netzwerkteam.de

X2Go Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

X2Go Bug report logs - #716 python-x2gobroker web/plain module strips passwords breaking passwords that start or end with a space

X2Go Bug report logs - #716
python-x2gobroker web/plain module strips passwords breaking passwords that start or end with a space